Privacy policy

Who we are

ZLab (operated by Zircular, Inc.) provides decision-governance services for physical assets. This policy explains how we collect, use, and protect personal information in connection with our website at zircular.io and our Asset Decision Review service.

What we collect

Contact and account information. When you request access, create an account, or contact us, we collect your name, email address, company, and role.

Engagement data you provide. During an Asset Decision Review engagement, you may upload operational data about a physical asset — including BMS/SCADA telemetry, maintenance records, contracts, and unit economics. This data relates to your asset, not to you personally. To the extent it contains personal information (for example, names of personnel in uploaded documents), that information is subject to this policy.

Usage data. We collect information about how you interact with our website — pages visited, time spent, referring URLs, browser type, and IP address — through standard server logs and analytics tools.

How we use it

• To deliver the Asset Decision Review service you requested.
• To communicate with you about your engagement, account, or service updates.
• To improve the website and service through aggregated, non-identifiable usage analytics.
• To comply with legal obligations and enforce our agreements.

Operational data from engagements

Data you upload as part of an engagement (BMS/SCADA, contracts, telemetry, and similar records) is used solely to deliver that engagement. We treat it as confidential. We do not use engagement-specific operational data for any purpose other than producing your deliverable.

We may use aggregated, fully de-identified, and anonymized insights derived from completed engagements to improve our analytical methods — provided no information attributable to you, your company, or your asset can be reconstructed. We will not publish or share case studies based on your engagement without your explicit written consent.

Engagement data is retained for the period specified in your engagement agreement, and then deleted or returned per the terms of that agreement.

Service providers

We work with third-party service providers for cloud hosting, email delivery, payment processing, and analytics. These providers act as data processors on our behalf under contractual restrictions that prohibit them from using your data for their own purposes.

Your rights

California residents (CPRA). If you are a California resident, you have the right to: know what personal information we have collected about you and how it is used; request access to or a copy of your personal information; request correction of inaccurate information; request deletion of your personal information, subject to legal exceptions; opt out of sale or sharing of personal information (we do not sell or share); and not be discriminated against for exercising these rights.

All users. You may contact us at any time to access, correct, or delete your account information, or to ask questions about how your data is handled.

To exercise your rights, contact us at davidl@zircular.io. We will respond within 45 days of receiving a verifiable request.

Data security

We implement reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, or loss. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the service after a change constitutes acceptance of the updated policy.